add note to portal overview re:Defender must be used for malware feature, edit tile label

windows/keep-secure/dashboard-windows-defender-advanced-threat-protection.md

@@ -61,7 +61,7 @@ The **Machines reporting** tile shows a bar graph that represents the number of
 ![The Machines reporting tile shows the number of machines reporting each day for the past 30 days](images/machines-reporting-tile.png)
 
 ## Machines with active malware detections
-The **Active malware** tile will only appear if your endpoints are using Windows Defender.
+The **Machines with active malware detections** tile will only appear if your endpoints are using Windows Defender.
 
 Active malware is defined as threats that are actively executing at the time of detection.
 
@@ -81,7 +81,7 @@ Threats are considered "active" if there is a very high probability that the mal
 
 Clicking on any of these categories will navigate to the [Machines view](investigate-machines-windows-defender-advanced-threat-protection.md), filtered by the appropriate category. This lets you see a detailed breakdown of which machines have active malware detections, and how many threats were detected per machine.
 
-> **Note**  The **Active malware** tile will only appear if your endpoints are using [Windows Defender](https://technet.microsoft.com/en-us/library/mt622091(v=vs.85).aspx) as the default real-time protection antimalware product.
+> **Note**  The **Machines with active malware detections** tile will only appear if your endpoints are using [Windows Defender](https://technet.microsoft.com/en-us/library/mt622091(v=vs.85).aspx) as the default real-time protection antimalware product.
 
 ### Related topics
 - [View and organize the Windows Defender Advanced Threat Protection Alerts queue](alerts-queue-windows-defender-advanced-threat-protection.md)

windows/keep-secure/portal-overview-windows-defender-advanced-threat-protection.md

@@ -35,6 +35,8 @@ When you open the portal, you’ll see the main areas of the application:
 
  ![Windows Defender Advanced Threat Protection portal](images/portal-image.png)
 
+> **Note**   Malware related detections will only appear if your endpoints are using [Windows Defender](https://technet.microsoft.com/en-us/library/mt622091(v=vs.85).aspx) as the default real-time protection antimalware product.
+
 You can navigate through the portal using the menu options available in all sections. Refer to the following table for a description of each section.
 
 Area | Description